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Raking & Jiggling 


Shimming 


Deviant Ollam 
deviating.net /lockpicking 


Deviant Ollam 
devlating.net /lockpicking 


Pick Guns 


Bump Key Attack 
“Pull” Method 


Bump Key Attack 
“Push” Method 


Bump Key Attack 
“Push” Method 


devlating.net /lockpicking 


Outdoor “Rugged” Locks 
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Power Panels 


Sensitive Wiring 
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American National Standards Institute 
Classification A156 
No Covert Security Ratings At All 


American Society for Testing Materials 
Classification F883 
Toughest Rating is only 15 minutes 


Many Times, Picking is 
Instantaneous 


You Need a Response Window 
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Un-Shimmable Padlocks 
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Side Pin 


Schlage Everest 
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o Similar to side pins 
o Restrict plug moveme 


o Harder to pick 
than pin stacks 
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Finger Pins 
Schlage Primus 
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Medeco plug exposed, key pins rotating to align 
sidebar cuts 
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certainly not “unpickable” Cracking One о 


Locks in An 


— Can be picked 
— Can be bumped 
— Numerous weaknesses 


e “Open in 30 Seconds" 
— Marc Tobias 
— Tobias Bluzmanis 
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• Sometimes Very Good 


Security 
— Mimics a safe lock 


o Difficult To Pick 
— Takes much time and great 
skill 
— Specialized tools requi 
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Rotating Disks 


• Sometimes Very Good Security 
— Mimics a safe lock 


o Difficult To Pick 
— Takes much time and great skill 
— Specialized tools required 


• Two-in-One Tool 


— Manipulates disks individually À 
— Decodes cut positions VA 


Barry Wels picking a rotating disk lock with Mike 
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Specialized Rotating Disks 


• Abloy Protec 
— Not just rotating disks 
— Disk blocking mechanism 


o “Unpickable?” 
— Closest | ever come to using that 
word 
— Two-in-one tools cannot be used 
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o Miwa 
— Japanese company 
— Array of magnetic pin: 
— Simple North / South 


e Evva MCS 
— Austrian company 


— Axial-rotated magnets / 
— Interaction with sidebar = SEED) 
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Evva Magnetic Code System 


e Possibly the most duplication-resistant 


Deviant Ollam 
"S eviating.net /lockpicking 


What About Safes ? 
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No special protections 
No bypassing resistance 
Unskilled Attacker - basic tools & techniques, under 5 
minutes 


2. Resistant Locks 


Some pick-resistant pins (possibly tighter keyway) 
Bump resistant, Zero potential of shimming or over lifting 
Unskilled Attacker - basic tools & technigues, more than 5 

minutes 
Skilled Attacker - basic tools & tech 


ues, under 5 minutes 
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3. High Security Locks 


Insurance 
Lock 


Advanced pick resistance, possibly wholly new mechanisms 
Zero potential of shimming or over lifting or bumping 
Unskilled Attacker - no chance in less than 30 minutes 
Skilled Attacker - special tools & technigues, at least 5 
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4. "Unpickable” Locks 


Advanced pick resistance, possibly wholly new mechanisms 
No potential of shimming or over lifting / Bump resistance 
Unskilled Attacker - no chance at all 
Skilled Attacker - highly special tools & technigues, at least 
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A New Physical Security 
o Three трава AWOEK 


— External Access 
— Internal Access 
— Sensitive Access 


* Which Locks Go Where...? 


"T 


A New Physical Security 
o Basic Ега mewo rk 


— Utterly unacceptable 

— Should be removed, in my view 
— False sense of security 

— Inevitable "cross- 
contamination" 
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A New Physical Security 
o Basic Ега mewo rk 


— Utterly unacceptable 

— Should be removed, in my view 
— False sense of security 

— Inevitable "cross- 
contamination" 
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A New Physical Security 
o externakkamewo rk 


— Personnel Doors 

— Wiring / Utilities 

— Susceptible to Vandals & Thugs 
© High Security Locks Should Be 


Reguired 
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@ Internal Etamewo rk 
— Office Doors 
— Closets 
— Protecting Privacy & Supplies, not Data 


o Pick Resistant Locks Are Acceptable 


Deviant Ollam 


o sensitiv РАСТ ewo rk 


— Server Racks 
— Networking Equipment 
— Any Termination-Worthy Data 


o “Unpickable” Locks Should Be Used 
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То Me, a “Proper” Lock 
Y Be Totally »hould Kf Attacks 


Y Resist Skilled Tactics for Thirty 

Minutes 

Leave Behind Clear Signs of 
Tampering 
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Forensic Evidence - 250 uses 
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Forensic Evidence - picking 


Forensic Evidence - raking 
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Forensic Evidence - both 
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Forensic Evidence - wow 


Forensic Evidence - pin sides 
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Forensic Evidence 


Forensic Evidence - tail cam 
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Forensic Evidence - bumping 
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• Sometimes major insurance implications 


e Suspect something fishy? 
— Don't compromise the scene 
— Contact a professional 
— Forensic Locksmith vs. Yellow-Pages Locksmith 


© Having newer locks matters 
— Age makes for a mess, internally 
— Also... your locks should be updated as a matter of 
routine 


e The facts are out there! 
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So Which Locks are Which ? 


o “Unpickable” 
— ABLOY Protec (rotating disks) 
-(EVVA) MCS (magnetic) 
MULT-LOCK мт5 апа MT5+ 
- KARA (electronic safe dial 
o High Security 
- Gau) Granit & Diskus (rotating disk | 
SA Twin (counter-milling, finger ри 
= (EVA) 3KS (sliders), DPI (new mode 
-ZDI Primus (И upgraded prope 
o Resistant 
-AMERICAN Padlocks (heavy duty models) 
-BEST Interchangeable Cores (modern models) 
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So Which Locks are Which ? 


o “Unpickable” 
- ABLOY Pr (rotating disks) 
-(EVVA) MCS (magnetic) 
-TMULTLOCK MTS and MT5+ 
- KARA! 


(electronic safe dial | 


o High Security 
-(AHUS) Granit & Diskus (rotating disk | 
-A Twin (counter-milling, finger pir | 
= (EVA) 3KS (sliders), DPI (new mode 
-ZDI Primus (if upgraded prope 
® Resistant 
-AMERICAN Padlocks (heavy duty models) 
- 3557 Interchangeable Cores (modern models) 
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